Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Webcast-Catalyst9k
New Member

packate drop

I am getting following message when I put sh log command, I tried it with Cisco output interpreter, but the solution given by the tool is not solving my problem. Cisco showing somrthing about Ipsec tunnel but this is CAT 3750 switch. And I am not able to troubleshoot the kind of problem is the switch facing. Please help me out if anyone can.

The outputs are given below.

sh log

Syslog logging: enabled (0 messages dropped, 1 messages rate-limited, 0 flushes, 0 overruns, xml disabled, filtering disabled)

Console logging: level debugging, 110860 messages logged, xml disabled,

filtering disabled

Monitor logging: level debugging, 86 messages logged, xml disabled,

filtering disabled

Logging to: vty1(5)

Buffer logging: level debugging, 110860 messages logged, xml disabled,

filtering disabled

Exception Logging: size (4096 bytes)

Count and timestamp logging messages: disabled

File logging: disabled

Trap logging: level informational, 287316 message lines logged

Log Buffer (4096 bytes):

6

-Traceback= AFC730 BFC660 BFC904 BFE2FC BFEFCC BFCE20 BFD140 CECABC CECC3C CCA094 C1828C BD9DF0 BEEFA4 BED478 BED5C8 BED88C

110845: *Apr 15 00:10:05.725 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3/0/19, changed state to down

110846: *Apr 15 00:10:06.732 UTC: %LINK-3-UPDOWN: Interface FastEthernet3/0/19, changed state to down

110847: *Apr 15 00:10:07.000 UTC: %ILPOWER-5-IEEE_DISCONNECT: Interface Fa3/0/19: PD removed

110848: *Apr 15 00:10:21.152 UTC: %IP-3-LOOPPAK: Looping packet detected and dropped -

src=172.x.x.x, dst=172.x.x.x, hl=20, tl=78, prot=17, sport=137, dport=137

in=Vlan10, nexthop=172.x.x.x, out=Vlan10

options=none

-Process= "IP Input", ipl= 0, pid= 156

-Traceback= AFC730 BFC660 BFC904 BFE2FC BFEFCC BFCE20 BFD140 CECABC CECC3C CCA094 C1828C BD9DF0 BEEFA4 BED478 BED5C8 BED88C

110849: *Apr 15 00:10:24.256 UTC: %LINK-3-UPDOWN: Interface FastEthernet3/0/19, changed state to up

110850: *Apr 15 00:10:25.262 UTC: %LINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet3/0/19, changed state to up

Solution as per Cisco is.....

CSCdt73791

Symptoms A tunnel comes up but fails to pass any IP Security (IPSec) traffic, and the following message is displayed on a router:

03:41:43: %IP-3-LOOPPAK: Looping packet detected and dropped - src=http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122cavs/192.147.21.165, dst=157.154.194.85, hl=20, tl=44, prot=6, sport=80, dport=4624 in=FastEthernet0/0, nexthop=157.154.252.30, out=FastEthernet0/0

Conditions This symptom is observed when access lists that match to a crypto map include public Port Address Translation (PAT)/Network Address Translation (NAT) IP addresses.

--------------------------------------------------------------------------------

Note Internal devices cannot access each other via the public address even though you can "source ping" or "source Telnet" from the same router to the peer. This is not a platform-specific issue.

--------------------------------------------------------------------------------

Workaround Do not use public addresses and bypass NAT. For more information, refer to the Cisco document at the following location: http://www.cisco.com/warp/public/707/static.html.

Alternate Workaround Include a different network on your NAT pool. If the IP NAT Pool is not on the same network as one of your interfaces, IPSec traffic will be routed. You may also use a Integrated Services Module (ISM).

2 REPLIES
Silver

Re: packate drop

The error message "%IP-3-LOOPPAK: Looping packet detected and dropped" is usually generated due to IP helper address mis-configuration in which a vlan that is not supposed to receive DHCP broadcast so it loops back that braodcast packet when it is detected. Check the IP helper mis-configuration and verify its configured only on the receiving vlan(s).

Cisco Employee

Re: packate drop

GRE tunnels are not supported on the 3750 if that is what you have configured. Can we see your configuration?

http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3750/12225seb/ol7189.htm#wp539899

247
Views
0
Helpful
2
Replies
CreatePlease to create content